It would be nice to give an organization unit (OU) instead of a list of ami_users

[nitrocode]

If an organization unit can be given i.e. ami_ou instead of a list of ami_users, then the account ids can be listed within the organizational unit and those accounts can be used to share the AMI.

The benefit is that we can expand and contract the list of accounts that we'd want to share our AMIs with without having to update the packer configuration.

[pjmcquade]

Seconded! Wish I knew Go.....I'd do it just to learn